Mozilla · Firefox · CVE-2026-16407
**Name of the Vulnerable Software and Affected Versions**
Firefox versions prior to 153
Thunderbird versions prior to 153
**Description**
A mitigation bypass exists within the DOM: Service Workers component. Service Workers are scripts that the browser runs in the background, separate from a web page, enabling features such as push notifications and offline access.
**Recommendations**
Update Firefox to version 153.
Update Thunderbird to version 153.